Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Red Hat Satellite 6.10.5 RHSA-2022:4866-01 Important: Async Bug Fix

red hat
Calendar Grey June 1, 2022
Dist Redhat Esm H88
Mandatory patch resolves asynchronous issues in Red Hat Satellite Tools 6.10.5, classified as Important in the security bulletin.
Updated Satellite 6.10 Tools packages that fix several bugs are now available

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Summary

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.
Bugs Fixed: 2023853 CVE-2021-27025 puppet: silent configuration failure in agent 2023859 CVE-2021-27023 puppet: unsafe HTTP redirect 2027254 CVE-2021-27025 CVE-2021-27023 CVE-2021-27025 puppet: multiple flaws in Satellite Tools [rhn_satellite_6.10]
Security Fix(es): * Puppet Agent: Unsafe HTTP redirect (CVE-2021-27023) * Puppet Agent: Silent configuration failure in agent (CVE-2021-27025)
Users of Red Hat Satellite Tools on all Red Hat Enterprise Linux versions are advised to upgrade to these updated packages.

Topics%20covered

Topics Covered

security advisory software update bug fix important async issue red hat satellite tools puppet agent

References

https://access.redhat.com/security/cve/CVE-2021-27023 https://access.redhat.com/security/cve/CVE-2021-27025 https://access.redhat.com/security/updates/classification#important

Package List

Satellite Tools 6.10 (v. 6.10.ELS Server):
Source: puppet-agent-6.26.0-1.el6sat.src.rpm
i386: puppet-agent-6.26.0-1.el6sat.i686.rpm
x86_64: puppet-agent-6.26.0-1.el6sat.x86_64.rpm
Satellite Tools 6.10 (v. 7 Client):
Source: puppet-agent-6.26.0-1.el7sat.src.rpm
x86_64: puppet-agent-6.26.0-1.el7sat.x86_64.rpm
Satellite Tools 6.10 (v. 7 ComputeNode):
Source: puppet-agent-6.26.0-1.el7sat.src.rpm
x86_64: puppet-agent-6.26.0-1.el7sat.x86_64.rpm
Satellite Tools 6.10 (v. 7 Server):
Source: puppet-agent-6.26.0-1.el7sat.src.rpm
ppc64le: puppet-agent-6.26.0-1.el7sat.ppc64le.rpm
x86_64: puppet-agent-6.26.0-1.el7sat.x86_64.rpm
Satellite Tools 6.10 (v. 7.2.AUS Server):
Source: puppet-agent-6.26.0-1.el7sat.src.rpm
x86_64: puppet-agent-6.26.0-1.el7sat.x86_64.rpm
Satellite Tools 6.10 (v. 7.3.AUS Server):
Source: puppet-agent-6.26.0-1.el7sat.src.rpm
x86_64: puppet-agent-6.26.0-1.el7sat.x86_64.rpm
Satellite Tools 6.10 (v. 7.4.AUS Server):
Source: puppet-agent-6.26.0-1.el7sat.src.rpm
x86_64: puppet-agent-6.26.0-1.el7sat.x86_64.rpm
Satellite Tools 6.10 (v. 7.4.E4S Server):
Source: puppet-agent-6.26.0-1.el7sat.src.rpm
ppc64le: puppet-agent-6.26.0-1.el7sat.ppc64le.rpm
x86_64: puppet-agent-6.26.0-1.el7sat.x86_64.rpm
Satellite Tools 6.10 (v. 7.4.TUS Server):
Source: puppet-agent-6.26.0-1.el7sat.src.rpm


Read the Full Advisory


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2022:4866-01
Product: Red Hat Satellite Tools
Advisory URL: https://access.redhat.com/errata/RHSA-2022:4866
Issue date: 2022-06-01

Topic

Updated Satellite 6.10 Tools packages that fix several bugs are nowavailable.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory software update bug fix important async issue red hat satellite tools puppet agent

Relevant Releases Architectures

Satellite Tools 6.10 (v. 6.10.ELS Server) - i386, x86_64

Satellite Tools 6.10 (v. 7 Client) - x86_64

Satellite Tools 6.10 (v. 7 ComputeNode) - x86_64

Satellite Tools 6.10 (v. 7 Server) - ppc64le, x86_64

Satellite Tools 6.10 (v. 7 Workstation) - x86_64

Satellite Tools 6.10 (v. 7.2.AUS Server) - x86_64

Satellite Tools 6.10 (v. 7.3.AUS Server) - x86_64

Satellite Tools 6.10 (v. 7.4.AUS Server) - x86_64

Satellite Tools 6.10 (v. 7.4.E4S Server) - ppc64le, x86_64

Satellite Tools 6.10 (v. 7.4.TUS Server) - ppc64le, x86_64

Satellite Tools 6.10 (v. 7.6.AUS Server) - x86_64

Satellite Tools 6.10 (v. 7.6.E4S Server) - ppc64le, x86_64

Satellite Tools 6.10 (v. 7.6.TUS Server) - ppc64le, x86_64

Satellite Tools 6.10 (v. 7.7.AUS Server) - x86_64

Satellite Tools 6.10 (v. 7.7.E4S Server) - ppc64le, x86_64

Satellite Tools 6.10 (v. 7.7.TUS Server) - ppc64le, x86_64

Satellite Tools 6.10 (v. 8) - x86_64

Satellite Tools 6.10 (v. 8.1.E4S Server) - x86_64

Satellite Tools 6.10 (v. 8.1.EUS Server) - x86_64

Satellite Tools 6.10 (v. 8.2.AUS Server) - x86_64

Satellite Tools 6.10 (v. 8.2.EUS Server) - x86_64

Satellite Tools 6.10 (v. 8.2.TUS Server) - x86_64

Satellite Tools 6.10 (v. 8.4.AUS Server) - x86_64

Satellite Tools 6.10 (v. 8.4.E4S Server) - x86_64

Satellite Tools 6.10 (v. 8.4.EUS Server) - x86_64

Satellite Tools 6.10 (v. 8.4.TUS Server) - x86_64

Satellite Tools 6.10 (v. 8.6.AUS Server) - x86_64

Satellite Tools 6.10 (v. 8.6.E4S Server) - x86_64

Satellite Tools 6.10 (v. 8.6.EUS Server) - x86_64

Satellite Tools 6.10 (v. RHEL-ALT 7.6 Server) - aarch64, ppc64le

Satellite Tools 6.10 for RHEL 8.2.E4S - x86_64

Bugs Fixed

2023853 - CVE-2021-27025 puppet: silent configuration failure in agent

2023859 - CVE-2021-27023 puppet: unsafe HTTP redirect

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here